PT-2026-28562

Name of the Vulnerable Software and Affected Versions Ella Core versions prior to 1.7.0 Description Ella Core, a 5G core designed for private networks, experiences a panic when processing a specifically crafted NGAP LocationReport message. An attacker capable of sending crafted NGAP messages to...

The vulnerability of the thinkpad_acpi_amd_s2idle_restore() function in the drivers/platform/x86/thinkpad_acpi.c driver module allows a attacker to cause a service failure.

The vulnerability of the thinkpadacpiamds2idlerestore function in the drivers/platform/x86/thinkpadacpi.c driver for supporting X86 devices in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nsim_pp_hold_write() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nsimppholdwrite function in the drivers/net/netdevsim/netdev.c module of the Linux kernel lies in the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the smc_init() function in the net/smc/af_smc.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the smcinit function in the net/smc/afsmc.c module of the Linux kernel is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

Allocation of Resources Without Limits or Throttling

Overview liquidjs is an A simple, expressive, safe and Shopify compatible template engine in pure JavaScript. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the replacefirst function. An attacker can exhaust system memory and disru...

CVE-2026-23287

A flaw was found in the Linux kernel's irqchip/sifive-plic component. When an interrupt's affinity setting is changed while a hardware thread hart is still processing the interrupt, the Programmable Interrupt Controller PLIC may ignore the interrupt completion message. This can lead to the...

SUSE CVE-2026-30955

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to 2.2.4, An API endpoint accepts unbounded request bodies without any size limit. An authenticated user can cause an OOM kill and complete service disruption for all users. This vulnerability is...

The vulnerability of the ena_init() function in the drivers/net/ethernet/amazon/ena/ena_netdev.c file of the Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the enainit function in the drivers/net/ethernet/amazon/ena/enanetdev.c file of the Ethernet network adapter driver for the Linux operating system exposes confidential information. Exploiting this vulnerability could allow an attacker to cause service failures...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple iPadOS is an operating system for iPad tablets. There were security vulnerabilities in versions of Apple iOS prior to 26.4 and Apple iPadOS prior to 26.4...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

The vulnerability of the Elastick Stack Filebeat software for logging files lies in incorrect configuration data input, which allows a perpetrator to trigger a service failure.

The vulnerability of the Elastick Stack Filebeat software for logging files is related to incorrect input of configuration data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the asix_read_cmd() function in the drivers/net/usb/asix_common.c module of the Linux kernel’s USB device driver support library allows a malicious actor to cause a service failure.

The vulnerability of the asixreadcmd function in the drivers/net/usb/asixcommon.c module of the Linux USB network adapter driver support framework is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ath9k_rx_prepare() function in the drivers/net/wireless/ath/ath9k/htc_drv_txrx.c file of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the ath9krxprepare function in the drivers/net/wireless/ath/ath9k/htcdrvtxrx.c file of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker...

The vulnerability of the MongoDB database management system, related to the unlimited distribution of resources, allows a hacker to cause a service failure.

The vulnerability of the MongoDB database management system is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the libexpat library for analyzing XML files, related to the swapping of the zero pointer, allows an attacker to trigger a service failure.

The vulnerability of the libexpat library for analyzing XML files is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the fpu_alloc_guest_fpstate() function in the arch/x86/kernel/fpu/core.c module, which is part of the Linux operating system’s x86 kernel support, allows a hacker to trigger a service failure.

The vulnerability of the fpuallocguestfpstate function in the arch/x86/kernel/fpu/core.c module of the Linux operating system’s kernel support for x86 platforms is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gs_can_open() function in the drivers/net/can/usb/gs_usb.c module of the Linux kernel’s CAN network device driver allows a hacker to cause a service failure.

The vulnerability of the gscanopen function in the drivers/net/can/usb/gsusb.c module of the Linux kernel-based network device driver framework is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the kvm_eiointcdestroy() function in the arch/loongarch/kvm/intc/eiointc.c module of the LoongArch architecture support module for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the kvmeiointcdestroy function in the arch/loongarch/kvm/intc/eiointc.c module of the LoongArch support module for the Linux operating system is related to improper memory release. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...

The vulnerability of the kvm_ipidestroy() function in the arch/loongarch/kvm/intc/ipi.c module, which is part of the LoongArch architecture support for the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the kvmipidestroy function in the arch/loongarch/kvm/intc/ipi.c module, which is part of the LoongArch Linux kernel support, is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the bridge_platform_create() function in the arch/mips/sgi-ip27/ip27-xtalk.c module, which supports the MIPS architecture of the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the bridgeplatformcreate function in the arch/mips/sgi-ip27/ip27-xtalk.c module, which is part of the Linux operating system’s MIPS architecture support, is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...